remoote.app

Work from anywhere. Start here.

Remoote.app

Work from anywhere. Start here.

Free resume builderCompaniesLog in
Home
Jobs
Lead Platform Engineer, Identity & Access

Lead Platform Engineer, Identity & Access

New
W
WebflowIdentity and access management
Remote-first (United States)Full-TimeLead
SalaryZone A: $232,000 - 290,000; Zone B: $217,600 - 272,000; Zone C: $204,800 - 256,000 (United States; USD). This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level.
Apply NowOpens the employer's application page
More jobs in this role

Job Details

Experience
Minimum of 8 years in identity, platform, or infrastructure engineering
Required Skills
PythonTerraform

Requirements

  • Have a minimum of 8 years in identity, platform, or infrastructure engineering.
  • Have owned a workforce identity platform at meaningful scale.
  • Bring hands-on experience architecting an enterprise identity provider; Okta is strongly preferred.
  • Be fluent in SAML, OIDC, OAuth 2.0, and SCIM, including debugging at the token and assertion level.
  • Have experience with identity governance, including RBAC design, HRIS-driven lifecycle automation, and audit requirements.
  • Have a strong grounding in Zero Trust, identity-based attacks, device trust, and non-human identity security.
  • Have scripting ability in Python, JavaScript, or a similar language.
  • Have infrastructure as code experience, such as Terraform.
  • Be able to communicate clearly with senior and executive audiences and drive architecture decisions.
  • Nice to have: experience governing identities for AI tools and agents, and Okta certifications.

Responsibilities

  • Own workforce identity architecture and the roadmap, including build-versus-buy decisions, with Okta as the core platform.
  • Establish Okta configuration standards, hardening, change control, and configuration as code using Terraform, APIs, Okta Workflows, or scripts.
  • Automate the identity lifecycle from joiner to leaver using the HRIS as the source of truth and SCIM for downstream applications.
  • Build application onboarding patterns, provisioning templates, and federated access to cloud and source control platforms.
  • Design RBAC, least-privilege controls, request and approval workflows, and access reviews, with automated audit evidence.
  • Strengthen access using phishing-resistant MFA, device trust, risk signals, and governance for non-human identities.
  • Stream identity telemetry to Security and serve as the primary responder for identity incidents and outages.
  • Provide on-call coverage for critical identity services, conduct post-incident reviews, and analyze logs with Security.
  • Manage the Okta vendor relationship, licensing, and cost.
View Full Description & ApplyYou'll be redirected to the employer's site
Zone A: $232,000 - 290,000; Zone B: $217,600 - 272,000; Zone C: $204,800 - 256,000 (United States; USD). This role is also eligible to participate in Webflow's company-wide bonus program. Target amounts are a percentage of base salary and vary by career level.
Apply Now